Messages in this thread | | | From | Dmitry Vyukov <> | Date | Mon, 28 Sep 2020 08:06:19 +0200 | Subject | Re: general protection fault in perf_misc_flags |
| |
On Mon, Sep 28, 2020 at 7:18 AM Dmitry Vyukov <dvyukov@google.com> wrote: > > On Sat, Sep 19, 2020 at 01:32:14AM -0700, syzbot wrote: > > > Hello, > > > > > > syzbot found the following issue on: > > > > > > HEAD commit: 92ab97ad Merge tag 'sh-for-5.9-part2' of git://git.libc.or.. > > > git tree: upstream > > > console output: https://syzkaller.appspot.com/x/log.txt?x=1069669b900000 > > > kernel config: https://syzkaller.appspot.com/x/.config?x=cd992d74d6c7e62 > > > dashboard link: https://syzkaller.appspot.com/bug?extid=ce179bc99e64377c24bc > > > compiler: clang version 10.0.0 (https://github.com/llvm/llvm-project/ c2443155a0fb245c8f17f2c1c72b6ea391e86e81) > > > > All below is AFAICT: > > > > This compiler you're using is not some official release but some random > > commit before the v10 release: > > > > $ git show c2443155a0fb245c8f17f2c1c72b6ea391e86e81 > > Author: Hans Wennborg <hans@chromium.org> > > Date: Sat Nov 30 14:20:11 2019 +0100 > > > > Revert 651f07908a1 "[AArch64] Don't combine callee-save and local stack adjustment when optimizing for size" > > ... > > > > $ git describe c2443155a0fb245c8f17f2c1c72b6ea391e86e81 > > llvmorg-10-init-10900-gc2443155a0fb > > > > The v10 release is: > > > > $ git show llvmorg-10.0.0 > > tag llvmorg-10.0.0 > > Tagger: Hans Wennborg <hans@chromium.org> > > Date: Tue Mar 24 12:58:58 2020 +0100 > > > > Tag 10.0.0 > > > > and v10 has reached v10.0.1 in the meantime: > > > > $ git log --oneline c2443155a0fb245c8f17f2c1c72b6ea391e86e81~1..llvmorg-10.0.1 | wc -l > > 7051 > > > > so can you please update your compiler and see if you can still > > reproduce with 10.0.1 so that we don't waste time chasing a bug which > > has been likely already fixed in one of those >7K commits. > > +Alex, Marco, > > There is suspicion that these may be caused by use of unreleased clang. > Do we use the same clang as we use for the KMSAN instance? But this is > not KMSAN machine, so I am not sure who/when/why updated it last to > this revision. > I even see we have some clang 11 version: > https://github.com/google/syzkaller/blob/master/docs/syzbot.md#crash-does-not-reproduce > > Is it possible to switch to some released version for both KMSAN and KASAN now?
Interestingly there is a new crash, which looks similar:
general protection fault in map_vdso https://syzkaller.appspot.com/bug?extid=c2ae01c2b1b385384a06
The code is also with 4 0's: Code: 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 57 49 89 ff 41 56 41 55 41 54 55 65 48 8b 2c 25 c0 fe 01 00 48 8d bd 28 04 00 00 53 <48> 00 00 00 00 fa 48 83 ec 10 48 c1 ea 03 80 3c 02 00 0f 85 51 02
But it happened with gcc.
Also I found this older one: general protection fault in map_vdso_randomized https://syzkaller.appspot.com/bug?id=8366fd024559946137b9db23b26fd2235d43b383
which also has code smashed and happened with gcc: Code: 00 fc ff df 48 89 f9 48 c1 e9 03 80 3c 01 00 0f 85 eb 00 00 00 65 48 8b 1c 25 c0 fe 01 00 48 8d bb 28 04 00 00 41 2b 54 24 20 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
I think there may be dozens older ones here: https://syzkaller.appspot.com/upstream#moderation2 e.g. this one where code also looks strange: https://syzkaller.appspot.com/bug?id=651c61721c822bfdcdae8bfb9320e4a9b4bd49c9
Maybe it's just a random silent memory corruption in the end?...
| |